Warning: Permanently added '10.128.1.185' (ED25519) to the list of known hosts. 2024/01/12 14:26:20 ignoring optional flag "sandboxArg"="0" 2024/01/12 14:26:20 parsed 1 programs 2024/01/12 14:26:22 executed programs: 0 [ 74.078001][ T5585] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 74.122050][ T4637] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 74.129327][ T4637] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 74.136653][ T4637] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 74.144289][ T4637] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 74.151585][ T4637] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 74.159346][ T4637] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 74.250151][ T5593] chnl_net:caif_netlink_parms(): no params data found [ 74.294414][ T5593] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.301564][ T5593] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.308737][ T5593] bridge_slave_0: entered allmulticast mode [ 74.315456][ T5593] bridge_slave_0: entered promiscuous mode [ 74.322653][ T5593] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.330021][ T5593] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.337312][ T5593] bridge_slave_1: entered allmulticast mode [ 74.344161][ T5593] bridge_slave_1: entered promiscuous mode [ 74.365546][ T5593] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 74.376431][ T5593] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 74.399556][ T5593] team0: Port device team_slave_0 added [ 74.406726][ T5593] team0: Port device team_slave_1 added [ 74.426031][ T5593] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.433012][ T5593] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.459009][ T5593] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.470860][ T5593] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.477865][ T5593] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.503758][ T5593] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.534603][ T5593] hsr_slave_0: entered promiscuous mode [ 74.540641][ T5593] hsr_slave_1: entered promiscuous mode [ 74.989857][ T5593] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 75.001186][ T5593] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 75.011900][ T5593] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 75.021982][ T5593] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 75.046980][ T5593] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.054172][ T5593] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.061606][ T5593] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.068794][ T5593] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.132517][ T5593] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.148803][ T4885] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.167974][ T4885] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.191900][ T5593] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.205778][ T4885] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.212919][ T4885] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.237157][ T4885] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.244342][ T4885] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.266932][ T5593] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 75.280565][ T5593] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 75.418440][ T5593] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.464402][ T5593] veth0_vlan: entered promiscuous mode [ 75.478813][ T5593] veth1_vlan: entered promiscuous mode [ 75.515570][ T5593] veth0_macvtap: entered promiscuous mode [ 75.527009][ T5593] veth1_macvtap: entered promiscuous mode [ 75.547124][ T5593] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.565842][ T5593] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.580822][ T5593] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.590685][ T5593] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.600638][ T5593] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.611472][ T5593] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.675830][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.688174][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.715326][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.724176][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.791727][ T5660] ================================================================== [ 75.799920][ T5660] BUG: KASAN: slab-out-of-bounds in dsa_user_prechangeupper+0x3a/0x240 [ 75.808189][ T5660] Read of size 8 at addr ffff88806e74acf0 by task syz-executor.0/5660 [ 75.816363][ T5660] [ 75.818694][ T5660] CPU: 1 PID: 5660 Comm: syz-executor.0 Not tainted 6.7.0-rc6-syzkaller #0 [ 75.827302][ T5660] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 75.837373][ T5660] Call Trace: [ 75.840670][ T5660] [ 75.843606][ T5660] dump_stack_lvl+0x214/0x300 [ 75.848918][ T5660] ? tcp_gro_dev_warn+0x150/0x150 [ 75.853969][ T5660] ? panic+0x680/0x680 [ 75.858059][ T5660] ? _printk+0xd5/0x120 [ 75.862240][ T5660] print_report+0x163/0x540 [ 75.866769][ T5660] ? read_lock_is_recursive+0x20/0x20 [ 75.872163][ T5660] ? __virt_addr_valid+0x211/0x2a0 [ 75.877565][ T5660] ? __phys_addr+0x90/0x120 [ 75.882099][ T5660] ? dsa_user_prechangeupper+0x3a/0x240 [ 75.887668][ T5660] kasan_report+0x142/0x170 [ 75.892195][ T5660] ? dsa_user_prechangeupper+0x3a/0x240 [ 75.897778][ T5660] dsa_user_prechangeupper+0x3a/0x240 [ 75.903163][ T5660] ? dsa_user_netdevice_event+0x1a27/0x2ab0 [ 75.909072][ T5660] dsa_user_netdevice_event+0x1a37/0x2ab0 [ 75.914818][ T5660] ? packet_notifier+0x77/0x910 [ 75.919688][ T5660] ? dsa_user_port_obj_del+0x530/0x530 [ 75.925173][ T5660] ? tls_dev_event+0x836/0xfe0 [ 75.929965][ T5660] ? br_device_event+0x142/0x8d0 [ 75.934922][ T5660] ? br_switchdev_event+0x480/0x480 [ 75.940136][ T5660] ? packet_notifier+0x8f0/0x910 [ 75.945094][ T5660] notifier_call_chain+0x16d/0x340 [ 75.950232][ T5660] __netdev_upper_dev_link+0x7cd/0xab0 [ 75.955718][ T5660] ? vxlan_netdevice_event+0xe3/0x560 [ 75.961110][ T5660] ? netdev_upper_dev_link+0xe0/0xe0 [ 75.966497][ T5660] ? rxe_notify+0xef/0x4c0 [ 75.970932][ T5660] ? hsr_netdev_notify+0x1f3/0xa80 [ 75.976152][ T5660] ? ip6_route_dev_notify+0x99/0x890 [ 75.981459][ T5660] ? netdev_adjacent_rename_links+0x470/0x470 [ 75.987544][ T5660] ? netdev_upper_dev_link+0x87/0xe0 [ 75.992861][ T5660] netdev_upper_dev_link+0x9e/0xe0 [ 75.997995][ T5660] ? netdev_master_upper_dev_get_rcu+0x1a0/0x1a0 [ 76.004341][ T5660] ? rtnl_is_locked+0x15/0x20 [ 76.009035][ T5660] ? netdev_rx_handler_register+0xa7/0x110 [ 76.014872][ T5660] macvlan_common_newlink+0x114e/0x18d0 [ 76.020439][ T5660] ? macvlan_dev_free+0xb0/0xb0 [ 76.025315][ T5660] ? tap_del_queues+0x3b0/0x3b0 [ 76.030272][ T5660] ? rtnl_is_locked+0x15/0x20 [ 76.034991][ T5660] ? netdev_rx_handler_register+0xa7/0x110 [ 76.040814][ T5660] macvtap_newlink+0x154/0x1d0 [ 76.045617][ T5660] ? macvtap_setup+0x60/0x60 [ 76.050223][ T5660] rtnl_newlink+0x1551/0x2040 [ 76.054943][ T5660] ? rtnl_setlink+0x5b0/0x5b0 [ 76.059643][ T5660] ? rtnetlink_rcv_msg+0x92f/0xe60 [ 76.064769][ T5660] ? mutex_lock_nested+0x20/0x20 [ 76.069752][ T5660] ? security_capable+0x8a/0xb0 [ 76.074617][ T5660] ? try_module_get+0x13d/0x290 [ 76.079486][ T5660] ? rtnl_setlink+0x5b0/0x5b0 [ 76.084191][ T5660] rtnetlink_rcv_msg+0xc1f/0xe60 [ 76.089144][ T5660] ? rtnetlink_rcv_msg+0x1ff/0xe60 [ 76.094362][ T5660] ? rtnetlink_bind+0x80/0x80 [ 76.099065][ T5660] ? __dev_queue_xmit+0x2b7/0x3340 [ 76.104279][ T5660] ? __lock_acquire+0xc10/0xc10 [ 76.109150][ T5660] ? __dev_queue_xmit+0x2b7/0x3340 [ 76.114278][ T5660] ? __dev_queue_xmit+0x2b7/0x3340 [ 76.119399][ T5660] ? __local_bh_enable_ip+0x4a/0x70 [ 76.124699][ T5660] ? __dev_queue_xmit+0x1883/0x3340 [ 76.129919][ T5660] ? __dev_queue_xmit+0x2b7/0x3340 [ 76.135056][ T5660] ? ref_tracker_free+0x234/0x780 [ 76.140109][ T5660] netlink_rcv_skb+0x1df/0x430 [ 76.144894][ T5660] ? rtnetlink_bind+0x80/0x80 [ 76.149583][ T5660] ? netlink_ack+0x1140/0x1140 [ 76.154371][ T5660] ? netlink_deliver_tap+0x30/0x120 [ 76.159582][ T5660] netlink_unicast+0x7b6/0x940 [ 76.164370][ T5660] ? netlink_detachskb+0x90/0x90 [ 76.169317][ T5660] ? __virt_addr_valid+0x211/0x2a0 [ 76.174440][ T5660] ? __phys_addr_symbol+0x2f/0x70 [ 76.179479][ T5660] ? __check_object_size+0x4a4/0x9d0 [ 76.184864][ T5660] ? bpf_lsm_netlink_send+0x9/0x10 [ 76.190018][ T5660] netlink_sendmsg+0xa0e/0xd20 [ 76.193447][ T4637] Bluetooth: hci0: command 0x0409 tx timeout [ 76.194783][ T5660] ? netlink_getsockopt+0x580/0x580 [ 76.206038][ T5660] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 76.211340][ T5660] ? security_socket_sendmsg+0x81/0xa0 [ 76.216821][ T5660] ? netlink_getsockopt+0x580/0x580 [ 76.222035][ T5660] ____sys_sendmsg+0x592/0x890 [ 76.226818][ T5660] ? schedule+0x112/0x230 [ 76.231166][ T5660] ? __sys_sendmsg_sock+0x30/0x30 [ 76.236210][ T5660] ___sys_sendmsg+0x27a/0x300 [ 76.240902][ T5660] ? __sys_sendmsg+0x290/0x290 [ 76.245695][ T5660] ? __fdget+0x186/0x210 [ 76.249957][ T5660] __se_sys_sendmsg+0x1b3/0x290 [ 76.254824][ T5660] ? xfd_validate_state+0x5e/0x70 [ 76.259867][ T5660] ? __x64_sys_sendmsg+0x80/0x80 [ 76.264812][ T5660] ? switch_fpu_return+0x10e/0x170 [ 76.270001][ T5660] do_syscall_64+0x45/0x110 [ 76.274498][ T5660] ? syscall_exit_to_user_mode+0x2c/0x1e0 [ 76.280210][ T5660] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 76.286094][ T5660] RIP: 0033:0x7f96ea67cd29 [ 76.290668][ T5660] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 76.310433][ T5660] RSP: 002b:00007f96eb3bf0c8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 76.318832][ T5660] RAX: ffffffffffffffda RBX: 00007f96ea7abf80 RCX: 00007f96ea67cd29 [ 76.326790][ T5660] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000005 [ 76.334850][ T5660] RBP: 00007f96ea6c947a R08: 0000000000000000 R09: 0000000000000000 [ 76.342899][ T5660] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 76.350852][ T5660] R13: 000000000000000b R14: 00007f96ea7abf80 R15: 00007fff3caf1318 [ 76.358898][ T5660] [ 76.362163][ T5660] [ 76.364468][ T5660] Allocated by task 5593: [ 76.368770][ T5660] kasan_set_track+0x4f/0x70 [ 76.373349][ T5660] __kasan_kmalloc+0x98/0xb0 [ 76.377919][ T5660] __kmalloc_node+0xad/0x1d0 [ 76.382487][ T5660] kvmalloc_node+0x72/0x150 [ 76.386977][ T5660] alloc_netdev_mqs+0x9d/0x14d0 [ 76.391815][ T5660] rtnl_create_link+0x2ea/0xc10 [ 76.396649][ T5660] rtnl_newlink+0x13ed/0x2040 [ 76.401401][ T5660] rtnetlink_rcv_msg+0xc1f/0xe60 [ 76.406414][ T5660] netlink_rcv_skb+0x1df/0x430 [ 76.411588][ T5660] netlink_unicast+0x7b6/0x940 [ 76.416416][ T5660] netlink_sendmsg+0xa0e/0xd20 [ 76.421181][ T5660] __sys_sendto+0x5a7/0x7c0 [ 76.425939][ T5660] __x64_sys_sendto+0xde/0xf0 [ 76.430687][ T5660] do_syscall_64+0x45/0x110 [ 76.435171][ T5660] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 76.441044][ T5660] [ 76.443354][ T5660] The buggy address belongs to the object at ffff88806e74a000 [ 76.443354][ T5660] which belongs to the cache kmalloc-cg-4k of size 4096 [ 76.457644][ T5660] The buggy address is located 3312 bytes inside of [ 76.457644][ T5660] allocated 3319-byte region [ffff88806e74a000, ffff88806e74acf7) [ 76.471935][ T5660] [ 76.474248][ T5660] The buggy address belongs to the physical page: [ 76.480632][ T5660] page:ffffea0001b9d200 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x6e748 [ 76.490793][ T5660] head:ffffea0001b9d200 order:3 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 76.499961][ T5660] memcg:ffff88801e28db81 [ 76.504174][ T5660] flags: 0xfff00000000840(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 76.512135][ T5660] page_type: 0xffffffff() [ 76.516532][ T5660] raw: 00fff00000000840 ffff888011c4f500 dead000000000122 0000000000000000 [ 76.525379][ T5660] raw: 0000000000000000 0000000000040004 00000001ffffffff ffff88801e28db81 [ 76.534107][ T5660] page dumped because: kasan: bad access detected [ 76.540928][ T5660] page_owner tracks the page as allocated [ 76.546616][ T5660] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 5593, tgid 5593 (syz-executor.0), ts 74232854607, free_ts 51365657187 [ 76.569522][ T5660] post_alloc_hook+0x10b/0x130 [ 76.574292][ T5660] get_page_from_freelist+0x345c/0x35f0 [ 76.579826][ T5660] __alloc_pages+0x255/0x650 [ 76.584565][ T5660] alloc_pages_mpol+0x3de/0x690 [ 76.589429][ T5660] alloc_slab_page+0x6a/0x170 [ 76.594102][ T5660] new_slab+0x70/0x270 [ 76.598320][ T5660] ___slab_alloc+0x94b/0xee0 [ 76.602982][ T5660] __kmem_cache_alloc_node+0x1f7/0x2c0 [ 76.608427][ T5660] __kmalloc_node_track_caller+0x9a/0x1c0 [ 76.614156][ T5660] kmemdup+0x2a/0x60 [ 76.618035][ T5660] __addrconf_sysctl_register+0xb1/0x3f0 [ 76.623738][ T5660] addrconf_sysctl_register+0x149/0x1a0 [ 76.629357][ T5660] ipv6_add_dev+0xd1f/0x1210 [ 76.633927][ T5660] addrconf_notify+0x563/0xe50 [ 76.638689][ T5660] notifier_call_chain+0x16d/0x340 [ 76.643790][ T5660] call_netdevice_notifiers+0x122/0x170 [ 76.649328][ T5660] page last free stack trace: [ 76.653997][ T5660] free_unref_page_prepare+0x82b/0x940 [ 76.659467][ T5660] free_unref_page+0x37/0x3a0 [ 76.664141][ T5660] vfree+0x175/0x2a0 [ 76.668016][ T5660] snd_pcm_lib_free_pages+0x1a1/0x260 [ 76.673399][ T5660] snd_pcm_release_substream+0x2be/0x480 [ 76.679026][ T5660] snd_pcm_oss_release+0x1a8/0x270 [ 76.684128][ T5660] __fput+0x3bb/0x9d0 [ 76.688088][ T5660] __se_sys_close+0x15f/0x220 [ 76.692747][ T5660] do_syscall_64+0x45/0x110 [ 76.697238][ T5660] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 76.703116][ T5660] [ 76.705430][ T5660] Memory state around the buggy address: [ 76.711051][ T5660] ffff88806e74ab80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 76.719092][ T5660] ffff88806e74ac00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 76.727133][ T5660] >ffff88806e74ac80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 07 fc [ 76.735345][ T5660] ^ [ 76.743037][ T5660] ffff88806e74ad00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 76.751092][ T5660] ffff88806e74ad80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 76.759147][ T5660] ================================================================== [ 76.775376][ T28] cfg80211: failed to load regulatory.db [ 76.782261][ T5660] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 76.790009][ T5660] Kernel Offset: disabled [ 76.794357][ T5660] Rebooting in 86400 seconds..